These status families are used by the public API, widget, dashboard, provider webhooks, and workers. Public API errors also include a stable code and request ID.
- 400
- Invalid request
- A query, JSON field, cursor, or required Idempotency-Key is missing or malformed.
- 401
- Authentication failed
- The API key, user session, admin session, provider signature, or cron secret is missing or invalid.
- 402
- Plan selection required
- The workspace has not completed required plan selection or onboarding.
- 403
- Not permitted
- The account, role, API scope, origin, plan, or widget capability does not permit the operation.
- 404
- Not found
- The resource does not exist inside the authenticated tenant boundary.
- 409
- State conflict
- The operation conflicts with current state or reuses an idempotency key with a different body.
- 413
- Payload too large
- The request exceeds the documented route limit.
- 429
- Rate limited
- Wait and retry with exponential backoff. Public API keys allow 600 requests per minute.
- 500
- Internal error
- Use the returned request ID when contacting Evnao support.
- 503
- Dependency unavailable
- A required provider, worker, database, or configuration is temporarily unavailable.